Description

Description:
A default cipher key is used for the "remember me" feature when not
explicitly configured. A request that included a specially crafted request
parameter could be used to execute arbitrary code or access content that
would otherwise be protected by a security constraint.